Security and Privacy questions

General

This topic covers questions about Virola Messenger security asked by customers or sent in their questionnaires.

Password

- Does your company enforce requirements on passwords to ensure appropriate strength (e.g., user ID not equal to password, password not equal to “password”, limit repetitive characters, require alphanumeric and special characters)?

- Passwords should be strong, at least 15 symbols and contain upper and lower case Latin letters, digits and special characters

Privacy

- Can you list the data that will be collected and accessed by your company?

- No data from the self-hosted Virola server or Virola client applications is disclosed to third parties, or available to Virola developers. Server owners bear responsibility for data storage and integrity. The only outbound request a self-hosted server sends is to verify its license. The request is sent to https://virola.io/check-license and contains the license and the server version.

If push notifications for mobile Virola clients are enabled on the server, encrypted push notifications about new messages and calls are sent from the server to Apple APNs or/and Google Firebase services and then to Virola mobile clients. However, these push notifications can be decrypted only on the server or on the client. If necessary, push notifications can be fully disabled for the server.

Types of data we collect:

•Email address - in case you create a cloud based Virola server.

•History of communication with us - chat transcripts, e-mails, phone calls records.

•Automatic technical data - IP, location, browser / operating system / device details.

•Anonymous data about the website usage - pages viewed, items clicked, time spent on the website.

Virola website sets the following cookies:

•SessionID - session cookie required for the website proper functioning

•ps_rvm_Mxlc - permanent cookie required for the live chat proper functioning

•Third-party services that set cookies via Virola website:

•Google Analytics - cookies required for the purposes of analytics, marketing campaigns, etc. Set once a visitor enters the website

•Provide Support Live Chat - cookies required for the live chat functioning. Set only if the live chat is used